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A two-way messaging 
network is described which 
al lows a user of a remote 
communicator to use pre-paid 
debit cards to authorize 
message communication. 
The debit card consists of a 
storage medium for storing a 
pre-paid authorization value 
and anti -counterfeit protection. 
The remote communicator has 
the ability to communicate 
with a base station and 
debit the authorization value 
| according to the amount of 
communication time used. 
The remote communicator 
also has ami-counterfeiting 
protection which is used in 
combination with the debit 
card to deter unauthorized 
communications using 
counterfeit components. 
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TWO-WAY MESSAGING NETWORK USING DEBIT CARDS 

5 FIELD OF THE INVENTION 

The present invention relates generally to communication systems and 
in particular the present invention relates to two-way messaging. More 
particularly, the present invention relates to protecting against unauthorized 
communication using counterfeit components of a two-way messaging 
1 0 network. 

BACKGROUND OF THE rNVFNTTON 
Current two-way communication systems such as cellular telephones 
rely on a billing system to charge customers for individual usage. In a 
cellular telephone system, the customer is typically charged a monthly fee and 
1 5 charged for the length of communication time used by the user. The service 
provider, therefore, must compute the charges for each user and operate an 
often expensive billing and collection system. 

To avoid billing for the limited use of apparatuses such as photo copy 
machines and pay phones, pre-paid systems are used. These pre-paid systems 
20 include the purchase of a debit card which stores a pre-paid authorization 
value which is debited according to the amount of usage of the apparatus. 
While the use of debit cards reduces the burden of billing, debit cards are 
susceptible to being counterfeited. 

Remote communicators such as cellular phones are also susceptible to 
25 the use of counterfeit components. Unlike public pay-phones or photo copy 
machines, the mobile nature of a cellular phone allows a counterfeiter to 
substitute counterfeit electrical components for valid components in a 
communicator to bypass the payment system or charge the usage to another 
user. Counterfeiting the electrical components of a communicator is possible 
30 if the counterfeiter identifies the protocol used by the communication network 
to compute and bill for usage. 

For the reasons stated above, and for other reasons stated below which 
will become apparent to those skilled in the art upon reading and 
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understanding the present specification, there is a need in the art for a credit 
system to pre-authorize communication from a remote communicator which 
protects against the use and development of counterfeit components. 

SUMMARY OF THF INVENTION 
5 The above mentioned problems with credit systems in messaging 

networks and other problems are addressed by the present invention and 
which will be understood by reading and studying the following specification. 
The present invention is a method of authorizing transmissions from a 
plurality of remote communicators to a base station. The method comprising 
1 0 the steps of, reading a coded protection word stored on a storage medium of a 
debit card with one of the plurality of remote communicators, decoding the 
coded protection word with the remote communicator and generating a key 
word based on the decoded protection word, communicating the key word to 
the debit card, and evaluating the key word with the debit card and 
1 5 authorizing the remote communicator to transmit to the base station based on 
the key word and an authorization value stored on the storage medium. The 
method can further include the step of providing the debit card with a custom 
protection word and a custom key word for use by one of the plurality of 

remote communicators. 

20 Another embodiment provides an alternate method of authorizing 

transmissions from a plurality of remote communicators to a base station. 
The alternate method comprising the steps of, reading a coded protection word 
stored on a storage medium of a debit card with one of the plurality of remote 
communicators, transmitting the coded protection word to the base station 

25 using the remote communicator, comparing the received coded protection 
word with a master list of valid coded protection words stored at the base 
station, transmitting a validation signal to the remote communicator indicating 
if the coded protection word is valid, and authorizing the remote 
communicator to transmit to the base station based on the validation signal 

30 and an authorization value stored on the storage medium of the debit card. 
The storage medium can be a magnetic strip. 
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Still another embodiment provides another method of authorizing 
transmissions from a plurality of remote communicators to a base station. 
This method comprising the steps of, generating a pseudo random code word 
using one of the plurality of remote communicators, communicating the 
5 pseudo random code word to a debit card comprising a storage medium 
containing an authorization value and a decoding algorithm, decoding the 
pseudo random code word using the decoding algorithm and communicating 
the decoded pseudo random code word to the remote communicator, and 
reading the authorization value from the storage medium if the decoded 
10 pseudo random code word is correct. 



In the drawings, where like numerals refer to like components 
throughout the several views, 

Figure 1 is an overview of the infrastructure of the multi-path resistant 
15 frequency-hopped spread spectrum mobile location system; 

Figure 2 describes the synchronization and message format of the 
outgoing paging signals from the base stations; 

Figure 3 describes the format of the frequency-hopped spread spectrum 
signal transmitted by the remote mobile units; 
20 Figure 4 is a remote communicator and a debit card of the present 

invention; 

Figure 5 is a block diagram of the remote communicator and a debit 
card of Figure 4; 

Figure 6 is a flow chart of the operation of the remote communicator 
25 and a debit card of Figure 4; 

Figure 7 is an alternate block diagram of the remote communicator and 
a debit card of Figure 4; 

Figure 8 is another alternate block diagram of the remote 
communicator and a debit card of Figure 4; and 
30 Figure 9 is an alternate flow chart of the operation of the remote 

communicator and a debit card of Figure 4. 



BRIEF DESCRIPTION OF THE DRAWINGS 
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PF TAH pr> descri ption OF THF PRF.FF.RRED EMBODIMENT 
In the following detailed description of the preferred embodiment, 
reference is made to the accompanying drawings which form a part hereof, 
and in which is shown by way of illustration specific preferred embodiments 
5 in which the inventions may be practiced. These embodiments arc described 
in sufficient detail to enable those skilled in the art to practice the invention, 
and it is to be understood that other embodiments may be utilized and that 
structural, logical and electrical changes may be made without departing from 
the scope of the present inventions. The following detailed 

10 description is, therefore, not to be taken in a limiting sense, and the scope of 
the present inventions is defined by the appended claims. 

The present invention is directed to granting financial authorization for 
communication time to communicate messages from remote mobile units. 
The present invention allows for granting financial authorization tor 
1 5 communication to users of remote mobile units who may have questionable 
credit worthiness, such as children. The remote mobile units may be located 
in motor vehicles, located on the person of people, carried within containers 
or packages, or any number or variety of mobile carriers. The communication 
system comprises one or more base stations which "transmit signals to the 
20 remote mobile units and receive signals from the remote mobile units. The 
base stations may send messages and information to the remote mobile units, 
or the base stations may simply send alert or interrogation commands to 
activate the remote mobile units. Thus the remote mobile units may be 
activated locally (for example by the wearer or vehicle) or remotely by the 
25 base station. The remote mobile units may be used by a person as a reverse 
pager, as an emergency locator or as a communication device. The remote 
mobile units may also be used as part of a vehicle to locate the vehicle if 
stolen, in an accident, for vehicle tracking or as an integral communication 
device. 

30 The remote mobile units receive messages as a standard paging device 

over licensed airwaves using a standard paging infrastructure. The remote 
mobile units, when activated, transmit low-power (less than one watt). 
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frequency-hopped, spread-spectrum communication signals. The transmitted 
signals from ihc remote mobile units are received by the base stations. The 
remote units accept special debit cards for authorizing communication lime 
from the remote unit to the base. A protection system is used to prevent the 
5 modification or impersonation of either the remote unit or the debit card. 
Following a detailed description of the two-way message system, the debit 
card and protection system arc described in detail. 

Two- Wav Messa ging System Overview 
In the preferred embodiment of the present invention, the transmitters 
0 and base stations of the present invention are as described in 

U.S. Patent Number 5430759 

entitled "LOW-POWER FREQUENCY-HOPPED SPREAD SPECTRUM 
ACKNOWLEDGMENT PAGING SYSTEM" . The 
infrastructure of this acknowledgement paging systems serves as the basis of 
the present system and the reverse pagers of this acknowledgement pager 
system operate identically in the present system. . 

Figure 1 depicts the major components of the two-way paging system 
in the aforementioned U.S. Patent Number 5430759 

entitled "LOW-POWER FREQUENCY-HOPPED SPREAD SPECTRUM 
ACKNOWLEDGMENT PAGING SYSTEM" # ] n 
the preferred embodiment of the present invention, all of the components of 
the existing paging system of Figure 1 are used. The reverse paging terminal 
110 at the central site operates to provide synchronization and messaging 
information through the paging terminal 116 to the reverse pagers 100 (also 
known as remote mobile units 100) via direct links to the base stations BS, , 
BS 2 and BS 3 through ground based radio links (not shown) or through a 
satellite uplink/downlink using a geostationary satellite (not shown). The 
base stations BS , , BS 2 and BS 3 include transmit and receive towers 1 1 3a, 
1 1 3b and 1 13c, respectively and base station terminals 201a, 201b and-20lc, 
respectively. Terminals 201a-201c are required for producing the accurate 
synchronization information needed to be transmitted to the remote mobile 
units and for local processing of the received messages. This synchronization 
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information is used to coordinate the frequency hopping transmissions and to 
coordinate the response of messaging from the plurality remote mobile units 
100 so as to minimize collisions within groups of remote mobile units and 
eliminate collisions between groups of remote mobile units. 



Standard paging messages sent from the base stations BS,. BS ? and 

/ BS y to the plurality of remote mobile units 100 are, in the preferred 

embodiment, sent as digital data encoded in the POCSAG paging standard. 
These messages may be used to interrogate the remote mobile units to activate 

10 the remote mobile unit to allow the base stations to begin the location process. 
Typically the paging channel has a center frequency of 143.160 MHz, with an 
NRZ FSK data rate of 512 bps or 1200 bps. Other bit rates such as 2400 
baud (bps) are also feasible. Figure 2 describes the POCSAG paging 
communications protocol as modified for use by the preferred embodiments of 

15 the present invention. In the top line of Figure 2, a greatly compressed time 
line of digital data transmitted according to the POCSAG protocol is shown. 
Batches of messages are transmitted in groups as shown in the details in the 
subsequent lines below the top line of Figure 2. In the second line of Figure 
2. a 1.0625 second interval (for 512 baud) is shown in which 544 bits are 

20 transmitted as a single batch. The batch is preceded by a synchronization 
code word SC as shown in the third line of Figure 2. 

The synchronization code word within each batch is followed by eight 
frames of digital data. Each frame is divided into two portions, an address 
portion and a message portion. The address code word of the message of 

25 frame 2 of Figure 2 is shown in line 4 while the message code word of the 
second half of frame 2 is shown in line 5. The address code word is preceded 
by a digital zero followed by 18 address bits, two function bits and 10 check 
bits. The address code word is followed by an even parity bit. The message 
code word portion of the frame is preceded by a digital one followed by 20 

30 message bits which are followed by 10 check bits and a single even parity bit. 
Thus each frame is comprised of 64 bits divided into two 32 bit sections. 



5 
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Synchronization of the base station terminal 200 and the remote 
mobile units 100 is necessary to ensure the units 100 are transmitting at the 
same time that the base stations are listening. Synchronization is also 
necessary to coordinate the division of the large number of remote mobile 
5 units into groups so that members of one group use different frequency 
hopping patterns from members of other groups. Synchronization of the 
remote mobile units 100 is accomplished by inserting a special frame into the 
POCSAG data which is used to synchronize the units. 

The purpose of the synchronization between the reverse paging 
10 terminal 1 10 and the remote mobile units 100 is to determine where along the 
pseudo random noise code the frequency hops are to be followed and to 
determine the exact times for transmitting frequencies from within any of the 
hops. This also enables the dynamic changing of a remote mobile units group 
membership such that if one group is experiencing a large number of 
15 collisions due to simultaneous transmissions, the reverse paging terminal 1 10 
may re-allocate some of the remote mobile units within that group to new 
groups to minimize collisions. 

Referring once again to Figure 2, eight frames of information are 
transmitted in each burst using the POCSAG format. Remote mobile units 
20 100 may be assigned to a specific frame within the transmission so that the 
remote mobile units, once recognizing the synchronization code word, can 
scan a specific frame for that remote mobile unit's address. Once the address 
is found, the remote mobile unit can determine any group changes that may 
be required to re-allocate that remote mobile unit to a different group. In 
25 addition, the POCSAG format is used to transmit a fine time synchronization 
code. The fine synchronization code is a transmission of a time pulse at an 
exact time synchronized to a GPS (Global Positioning System) clock to 
synchronize all the remote mobile units 1 00 for time of transmission. For 
example, periodically during the day the reverse paging terminal will send a 
30 synchronization code within the POCSAG code word which is sent at a very 
precise time. In order to ensure that a precise time pulse is sent, the reverse 
paging terminal 1 1 0 receives accurate time information using a GPS antenna 
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to receive accurate time of day information. The time used to send the 
synchronization pulse is when the day clock reaches exactly some multiple of 
0.9 seconds in the preferred embodiment. In this synchronization information, 
20 bits of information are transmitted to give the accurate time of day 
5 information. 

In each of the remote mobile units 100, the microprocessor compares 
this accurate time pulse which will indicate the exact time of day and 
compare it to its own day clock. The clock within each microprocessor is 
accurate down to a few milliseconds, but the time at which the 

1 0 synchronization pulse occurs should have a resolution much finer than that 
such as down to 0.1 milliseconds for time of day. In this fashion, each of the 
microprocessors in each of the remote reverse paging devices can periodically 
realign its day clock to know within a millisecond the exact time. Each 
microprocessor does not actually realign its clock but changes a clock offset 

1 5 within memory so that it understands how far off its own internal clock is and 
can make the adjustment when using that clock to determine when to start 
transmitting information. 

The synchronization, pulse is only transmitted every few minutes. 
However, the resolution of the start of the message indicating the 

20 synchronization pulse is very accurate, it being transmitted at 0.090000 

seconds GPS time after a fixed time of day, such as 12:00 GMT. This GPS 
time is accurate to at least within 100 nanoseconds. 

An overview of the transmission format of the remote mobile unit is 
shown in Figure 3. The actual transmission of information from the remote 

25 mobile units iOO.is done using Differential Bi-Phase Shift Keying (DBPSK) 
modulation on a frequency hopped carrier of less than one watt. The 
transmission of information from the remote mobile units 100 on the 
frequency, hopped carrier may also be done using Frequency Shift Keying 
(FSK) modulation. Typically a single transmission consists of 53 hops or 53 

30 changed frequencies selected from a list of narrow band frequencies. The 
frequency selection is based on a pseudo-random noise code list pointing to 
the frequency selection list. The synchronization information tells the remote 
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mobile unit 100 where along the pseudo random noise code it should be 
synchronized for transmission of its message and tells exactly the time of day 
so that the remote mobile unit 100 knows exactly when to start transmitting 
the specific frequency that the base stations BS , , BS , and BS 3 , labeled 
5 1 13a, 1 13b, and 113c, respectively, are looking for that frequency at the same 
time. 

In operation, 200 frequencies are used by the remote mobile unit 100 
and the base stations and internally stored in a list numbered Fl through 
v F200. For a specific message, 53 frequencies will be used to transmit the 
10 entire message. These 53 frequencies are selected based on a 1,000 member 
pseudo-random noise code. 

The use of the accurate synchronization signal periodically broadcast 
via the outbound paging signal enables the remote mobile units to use lower 
accuracy components thus reducing the manufacturing cost of remote mobile 
1 5 units. For example, high accuracy crystals to track the time of day within the 
microprocessor are available with an accuracy of three parts per million. 
Thus, a time drift of approximately three micro seconds per second or 1 80 
microseconds in a minute is the known drift. There are also time inaccuracies 
which are introduced due to the variable path length between the paging tower 
20 and the remote mobile unit. By employing crystals which are cheaper and 
have an accuracy of the order 50 parts per million, the amount of time-of-day 
drift normally wouldn't be tolerable. However, by using the synchronization 
information transmitted on a regular basis from the reverse paging terminal, 
the microprocessor can continually correct its own internal day clock so that 
25 accurate time of day measurements are always maintained. The 

microprocessor estimates the momentary inaccuracy of the crystal by tracking 
the drift across several synchronization transmissions and dynamically adjusts 
for the frequency drift of the crystal and the offset using internal offset 
registers for accurate time of day information. 
30 Counters are employed within each microprocessor of the reverse 

paging units to compensate for the offset of the frequency based on the 
synchronization time information. There are generally two major factors 
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which affect the drift in a crystal: temperature and acceleration. Most of the 
drift is due to temperature, and the remaining drift components are negligible. 
The frequency drift in a crystal due to temperature is very slow, on the order 
of 50 Hz over 10 seconds. During a single day the temperature can change 
5 by 20 or 30 degrees fahrenheit, requiring a time update from the GPS clock 
approximately every five minutes. 

Remote Mo bile Unit Transmission Format 
The signal sent from the remote mobile unit 100 to the base stations is 
a spread-spectrum, frequency-hopped transmission using differential bi-phase 

10 shift keying (DBPSK) modulation on the frequency-hopped carrier to transmit 
digital information. The transmission of information from the remote mobile 
units 100 on the frequency hopped carrier may also be done using Frequency 
Shift Keying (FSK) modulation. The frequency hops are relatively slow, the 
frequencies transmitted are very narrow and the transmission power is 

15 extremely small. The maximum peak output power of transmission from 
remote mobile unit 100 is limited to less than one Watt to allow use of the 
902-928 MHz ISM band in the United States without the need for licensing 
the remote units as allowed by FCC regulations defined in 47 C.F.R. §15.247. 
Those skilled in the art will readily recognize that other frequency bands and 

20 transmissions power levels may be employed depending upon FCC licensing 
requirements or other frequency licensing requirements of other nationalities. 

The use of an accurate crystal to control each frequency of 
transmission is required within each remote mobile unit 1 00. For example, 
high accuracy crystals to transmit the narrow bandwidth frequencies used for 

25 the frequency hopped transmissions are available with an accuracy of three 
parts per million. At 900 MHz, a 3 ppm drift would place a single frequency 
somewhere within a 2.7 KHz band. To tolerate frequency drift due to aging 
and temperature, each individual frequency of the frequency hopped signal is 
allocated to a 7.5 KHz band or channel, even though the actual frequency is 

30 on the order of 200 Hz wide skirt within this 7.5 KHz allocated bandwidth. 
Those skilled in the art will readily recognize that by using alternate 
components, the frequency channels (individual frequency of the frequency 
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hopped signals) of 7.5 KHz allocated bandwidth may be wider or more 
narrow depending upon the overall allocated bandwidth lor the system. For 
example, I KHz or less bands may alternatively be allocated per channel. 
Tests on this system have shown that by processing the received 
5 signals at the base stations entirely in the digital domain using the 
combination of unique Fast Fourier Transform algorithms 
to locate and retrieve the frequency hops and by using a 

combination of unique confidence algorithms with a plurality of error 
correction codes, the receiving base station is able to pull the response 
10 information from a very low power signal from a distance of up to 45 

kilometers (28 miles) in a flat terrain. In a rather noisy urban environment, a 
range of 24 kilometers (15 miles) is the norm. The information within the 
signals is accurately decoded even in severe multipath and noise conditions. 

As shown in Table 1, the remote mobile unit message format consists 
15 of a preamble and the message body spanning a total of 53 frequency hops. 
Those skilled in the art will readily recognize that longer messages may be 
transmitted using the preferred embodiment of the present invention, and the 
messages format described here is illustrative but not limiting. Much longer 
message hops to transfer more digital data is also implemented but not 
20 described here. Of course, those skilled in the art will readily recognize that 
shorter messages than those described below are equally possible for the 
preferred embodiments of the present invention. The message length and 
number of transmission hops are a matter of design choice. 

The message preamble consists of a predefined code of ones and zeros 
25 to get the attention of the base unit receiver to pull the message out of the 
noise. The preamble consists of 165 bits transmitted across 5 hops, that is, 
transmitted using DBPSK (Differential Bi-Phase Shift Keying) or Frequency 
Shift Keying (FSK) on five different frequencies selected from the frequency 
list with the specific frequencies selected based on the PN (Pseudo-random 
30 Noise) Code list stored within the remote mobile unit. The sequence location 
within the PN code that the remote mobile unit will begin to follow is based 
on the synchronized time of day. Within a single hop (a single carrier 
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frequency), ihc carrier phase is modulated 33 times to encode the predefined 
one-zero pattern of ihc preamble. 

The message body follows the preamble and consists of three groups 
of data, liach group consists of 30 actual data bits so that the emirc message 
5 is, in the preferred embodiment of the present invention. 90 total data bits 
(although other bit length messages may be chosen). The actual data encoded 
within these 90 bits is described above and may be in any convenient coded 
format. Those skilled in the art will readily recognize that a wide variety of 
message formats and encoding of the data bits may be used without departing 
10 from the scope of the present invention. The encoding described 

here, however, has been proven effective in retrieving the data bits buried in 
background noise with a high degree of accuracy and a low actual error rate. 



15 



TABLE 1: Remote Mobile Unit Message Format 



Preamble is 165 bits (33 bits x 5 hops) 
Message is 48 * 33 transmitted bits 
20 (Message is 90 bits actual data) 

0= One Frequency Hop 



I I I I j ; r~~i ( i i — i — ; — ( — ; — i — ! — ; — i — i — : — r 
preamble | Message Body Spread Over 48 Hops 

— I — i — ! — 1 — i — 1 — 3 — I — I i I * ' ' ' * i i \ i i i 



25 



30 



Quier Message Coding 
Each of the three groups of message data (30 bits each) are BCH 
encoded using a standard 30,63 BCH code and with a single parity bit added 
to form a 64-bit word. This encoding decreases the error rate from 10* 2 to 10' 
35 \ This encoding, documented and understood by those skilled in the art, can 
correct up to 6 errors or detect up to 13 errors. Detection of corruption of a 
data word that cannot be reconstructed will cause the base to request a second 
transmission of the acknowledgement message. 

40 Inner Coding and Interleaving 
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The inner coding of the message will protect the integrity of the 
message with an error rate as high as 25%. Each block of 64 bits of data 
(corresponding to a groups of 30 bits and earlier encoded by a standard 30,63 
BCH code) is split into two sub-blocks of 32 bits (sub-blocks A and B of 
5 Table 2), and a reference bit is added to each sub-block to assist the 
differential encoding to provide a reference bit to the DBPSK or FSK 
decoder. The 33 bit sub-blocks are transmitted over one frequency hop each 
and are replicated 8 times so that the 64-bit block traverses 16 frequency 
hops. In transmission, the 33 bit sub-blocks are interleaved to further reduce 
10 loss of data, as shown in Table 3, where sub-blocks A and B of Table 2 

correspond to the first group of 30 bits, sub-blocks C and D, correspond to the 
second group of 30 bits, etc. The total message is 53 hops where each hop is 
180 msec in length making the duration of a single message 9.54 seconds. 

15 

TABLE 2: Interleaving Format for Sub-block 

A = l reference bit and 32 data bits = 33 bits 
20 B = 1 reference bit and 32 data bits = 33 bits 

0 = One Frequency Hop 
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Those skilled in the art will readily recognize that a wide variety of 
data interleaving may be utilized to effect better error tolerance and may be 
substituted for the interleaving described here. Such alternate substitute 
5 interleaving means are CIRC (Cross Interleaved Reed Solomon Code) used in 
CD (Compact Disc) recording media operating either at the block level or at 
the bit level. 

Single Hop Format 
The acknowledgment signals are transmitted by the remote mobile 
10 units 100 in a 1.5 MHz band selected from within the 902-928 MHz 

spectrum. The 1.5 Mhz band is divided into 7.5 KHz channels to provide 200 
channels available in which the frequency hops can occur. Thus, each 
frequency hop is a channel 7.5 KHz wide in which a carrier frequency is 
transmitted. For example, channel one will have a frequency Fl at 902.00375 
15 MHz +/- 3.75 KHz, channel two will have its center carrier frequency at 
902.01025 MHz +/- 3.75 KHz, etc. 

Each transmit frequency of each hop will thus be centered at the 
approximate mid-point of the assigned channel band; however, due to 
inaccuracies in the remote mobile unit circuits and reference crystals, the 
20 actual transmit frequencies will vary between units. If high quality crystals 
are used to accurately produce the required frequencies, very little drift off the 
center frequency will result. In the preferred embodiment of the present 
invention, low cost crystals are purposely employed to keep the per-unit 
manufacturing costs down. This will allow for a lower-cost product sold to 
25 the user which will increase market penetration. Thus, reference crystals are 
preferred which have a frequency accuracy of 3 ppm such that at 900 MHz, 
the statistical drift would be approximately 2700 Hz. The crystals center 
frequency within its nominal accuracy also drifts due to aging and temperature 
variations, but this drift is slow compared to the transmission times so the 
30 drift during a single transmission due to these latter variants is unimportant. 

A single frequency hop is shown in Table 4. The 15 millisecond 
guard time preceding each hop is primarily a settling time for the oscillator 
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circuits of* the remote mobile units lo allow the internal oscillator circuit to 
lock onto the new frequency between hops. Each hop is transmitted at a 
single frequency in which the phase ol the carrier is either ai 0 degrees phase 
or 180 degrees phase in reference to the phase of the reference bit 
5 immediately following the quiet or guard lime. Thus the first bit is a phase 
reference bit followed by 32 data bits exhibiting either zero phase shift or 180 
degree phase shift to encode the data bits as DBPSK (Differential Bi-Phase 
Shift Keying). In an alternative implementation, each frequency hop may be 
modulated using Frequency Shift Keying (FSK) in which two frequencies are 
10 used to transmit data bits. One hop frequency may indicate a logical one 
while a second hop frequency may indicate a logical zero. The frequency 
shift is minor and the frequency differential is contained within a single hop 
channel. 

Each bit of DBPSK or FSK is a transmission of 5 milliseconds of the 
15 hop carrier frequency either in phase with the reference bit transmission or 
1 80 degrees out of phase. 



20 TABLE 4: Single Frequency Hop Format 

Guard time .(quiet) 15 ms 

Single Bit = 5 ms of carrier DBPSK / FSK 
33 Bits plus guard time = 180 ms 

25 



30 



15ms 


5 ms 


5ms 


5ms 


5ms 




5ms 


5ms 


Guard 


Ref 


1st 


2nd 


3rd 




31st 


32nd 


Time 


Bit 


Bit 

i 


Bit 


Bit 




Bit 


Bit 



Frequency Hopping Sequence 
35 All of the remote mobile units in the market serviced by the reverse 

paging terminal for message or location finding use the same pseudo random 
noise code to determine the frequency hops. The pseudo random noise code 
is a digital code of 1,000 unique numbers. In the preferred embodiment of 
the present invention, the pseudo random noise code is stored in memory of 
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each of the remote mobile units. Those skilled in the art will readily 
recognize, however, that a linear feedback shift register could be used to 
generate the pseudo random noise code on a real-time basis instead of using a 
look-up table which is presently in the preferred embodiment. 
5 The PN (pseudo-random noise) code list is stored in memory and maps 

to a frequency list. In the preferred embodiment of the present invention, the 
PN code list has 1,000 entries which repeat as a sequence. The control means 
of the reverse paging units continuously maintain a count of the proper 
location within this list. As described below, the time of day for all remote 
10 mobile units in the market served by the base terminal are periodically 
synchronized to ensure acknowledgment messages are synchronized to 
transmit the hop frequency at the proper time and to synchronize the location 
within the PN code list that each remote mobile unit will use to transmit. 

The 1,000 member PN code list maps to a 200 member frequency list. 
15 In order to allow a large number of remote mobile units to simultaneously 
operate in the same geographic market, the remote mobile units are divided 
into groups and the groups are assigned different sequence segment locations 
in the same 1,000 member PN list. Thus a remote mobile unit from group 
one will begin transmitting a hop at a frequency determined from a first 
20 location with the PN code, while a remote mobile unit from group two may 
begin transmitting a hop at a frequency determined from a second location in 
the PN code. The remote mobile units from group one and group two will 
complete their respective acknowledgement messages in 53 hops. Preferably, 
the sequence of the PN code used to determine the frequencies of the 53 hops 
25 for the remote mobile unit of the first group will not overlap the sequence of 
the PN code used to determine the frequencies of the 53 hops for the remote 
mobile unit of the second group. More preferable, the frequencies chosen 
based on the non-overlapping segments of the PN code list are orthogonal 
such that the same frequency is never used by two remote mobile units 
30 belonging to different groups. 

In the preferred implementation, the 1,000 member PN code list is 
divided into 160 hopping sequences. The remote paging units are divided into 
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40 groups with ihc members of each group synchronized lo track the same 
location in the PN code list. The microcontroller of each remote mobile unit, 
regardless of its group membership, continuously runs through the repeating 
PN code sequence lo stay in synchronization with the base unit and all other 
5 remote mobile units. Each group of remote mobile units is further divided 
into four subgroups such that the remote mobile units within eacli subgroup 
are assigned one sequence within the PN code list. Although the 53 hop 
sequence needed for each acknowledgement transmission may overlap the 53 
hop sequence used by a remote mobile unit in another subgroup, the 

10 transmission sequences of a remote mobile unit of one group is chosen to not 
overlap the 53 hop sequence used by a remote mobile unit in another group. 

Base Statio n Design 
As described in LB Patent nunber 5430759, the analysis and 
decoding of the signals received by the base stations from the remote mobile 

15 units is done almost entirely in the digital domain. The carrier frequencies of 
the frequency hops are down-converted to a lower frequency in each base 
station and are then digitally sampled. The digital samples are then processed 
to locate the phase information of interest for direction finding and message 
decoding. Each base station is constructed with a plurality of digital signal 

20 processor pipelines which enable simultaneous message decoding and 

direction finding of a plurality of simultaneously transmitting remote mobile 
units. 

Debit Card System 

In the pre-paid debit card system of the embodiment of the present invention 
25 the user of a rarote camunicator 200 or paging unit purchases a debit card 210 to allow 
the user to pre-pay for the two-way messaging service, as shown in Figure 4. 
The debit card to be used with a remote communicator is preferably the 
approximate size and shape of a common credit card. The debit card stores 
an indication of the amount of pre-paid communication time available to a 
30 user. The debit card provides financial authorization for communication, 

thereby enabling communication with users having questionable credit such as 
children. It can be seen that there is monetary value associated with the card 
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which provides an incentive to counterfeit the debit card for resale or personal 
use. Therefore, protection must be provided to deter the manufacture of 
counterfeit cards or other components critical to the operation of the pre-paid 
debit card system. 

5 Referring to Figure 5. the debit card 210 has a storage medium 220 

thereon for storing an authorization value corresponding to the pre-paid value 
of the debit card. The authorization value is preferably an indicator indicating 
to the remote communicator the amount of authorized time available for 
transmitting messages to the base unit. 
10 The communicator 200 preferably has a physical slot 230 or groove 

therein for receiving the debit card 210 and is capable of reading from and 
writing to the storage medium of the debit card. To protect against the 
unauthorized manufacturing or counterfeiting of either the debit card or the 
remote communicator, anti-counterfeiting protection is incorporated in both 
1 5 the communicator and the debit card. For example, a counterfeiter may 

attempt to produce a counterfeit component by connecting a logic analyzer to 
the communication lines 242 between the card and the communicator. The 
communicator would be activated and the logic analyzer records all data 
transferred between the communicator and the debit card. Based on the 
20 recorded data a counterfeit component might be developed. 

In the preferred embodiment, referring to Figure 5. the communication 
system is protected against counterfeiters by using a coded protection word 
stored on the debit card 210 and a unique protocol between the remote 
communicator 200 and debit card. The storage medium is not directly 
25 readable, but can only be read after following the following sequence. When 
a new debit card is inserted into a remote communicator, the remote 
communicator reads the coded protection word from the storage medium of 
the debit card. A decoder circuit 240 of the remote communicator then 
decodes the coded protection word using a unique algorithm and generates a 
30 key word based on both the algorithm and the coded protection word. The 
remote communicator then provides the key word to the debit card via the 
communication lines 242. In turn, the ami -counterfeit protection on the debit 
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card, which preferably comprises a microprocessor 244. evaluates the key 
word provided from the remote communicator. If the remote communicator 
has used the correct algorithm, the debit card authorizes the remote 
communicator to read and modify the authorization value stored in the storage 
5 medium 220. It will be understood by one skilled in the an that the 

protection word can be varied from debit card to debit card such that decoding 
the unique algorithm is difficult for a counterfeiter. Further, a variety of key 
words can be used to allow for the periodic changing of the algorithm. 

As the remote communicator 200 transmits to the base unit using 

10 transmitter 246, the authorization value stored on the debit card 210 is 
updated or automatically debited to reflect the amount of pre-paid 
transmission time used. The debit card is preferably updated by physically 
blowing a portion of programmable read only memory (EPROM) provided as 
the storage medium 220 on the debit card. The debit card will only accept a 

1 5 pre-determined number of incorrect key words before inactivating itself. The 
debit card, therefore, must be used by a user with a remote communicator 
containing a valid algorithm. 

Referring to Figure 6, a flow chart illustrates the method of authorizing 
transmission from a remote communicator 200 to a base station using the 

20 preferred embodiment. After the remote communicator reads the protection 
word from the debit card 210, it computes and outputs the key word to the 
debit card. If the remote communicator outputs the correct key word, the 
communicator can read and update the content of the authorization value. 
The debit card will shut down if the incorrect key word is output four times, 

25 by way of example, but not by limitation. After the debit card has recognized 
the correct key word from the remote communicator, the user of the remote 
communicator can provide the debit card with an optional updated custom 
protection word and a corresponding key word for continued use by that 
customer's particular remote communicator. This option provides an 

30 additional layer of protection, such that if the user were to lose his/her debit 
card; another user could not use the debit card in another remote 
communicator and transmit to a base unit using the remaining pre-paid 
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authorized transmission time on the debit card. This option also deters the 
theft of valid debit cards. 

The preferred embodiment provides a debit card which protects against 
reading valid- debit cards in an effort to understand the protection and 
5 counterfeit the cards. Referring to Figure 7, in an alternate embodiment the 
remote communicator 200 provides additional protection against counterfeit 
debit cards or electronics that emulate the output of the debit card. In the 
alternate embodiment, the debit cards have a storage medium 220 with a 
unique ;coded protection word stored thereon. When a new debit card is 
10 inserted into a remote communicator the remote communicator reads the 

protection word and transmits that word to the base unit via transmitter 246. 
The base unit then compares the received protection word against a master 
database which contains a list of all valid protection codes currently in use on 
issued debit cards. If the debit card's protection code matches a valid 
1 5 protection code, the base unit notifies a receiver 250 of the remote 

communicator with a validation signal. Similarly, if the protection code is 
invalid the remote communicator is notified with an invalid signal. If the 
debit card is valid, the remote communicator is authorized to transmit 
messages to the base unit and debit the authorization value in accordance with 
20 the length the communication. An optional feature for this embodiment 
allows the base unit to transmit a new validation code to the remote 
communicator such that the remote communicator can update the protection 
word on the debit card. This option allows the user of the remote 
communicator to use a semi-custom protection word similar to that available 
25 in the preferred embodiment to deter theft. The base unit then deletes the 
original protection word from the database, thereby reducing the amount of 
protection words stored therein. The storage medium of the debit card is 
preferably a magnetic strip for storing the authorization value and the coded 
protection word. 

30 I n a second alternate embodiment directed to protect the debit card 

system, a debit card 210 having a microprocessor 252 is used, see Figure 8. 
The debit card has a unique decoding algorithm stored in the microprocessor. 
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In this embodiment, the remote communicator 200 provides the debit card a 
code word that is generated pseudo-randomly by a code generator 254 to be a 
"random code." The debit card decodes the random code using the unique 
decoding algorithm and generates a decoded random code using the micro 
5 processor 252. This decoded random code is provided to the remote 

communicator and the remote communicator evaluates the decoded signal to 
verify that the debit card contains the correct algorithm. If the use of the 
correct algorithm is detected the remote communicator reads and writes to the 
storage medium 220 of the debit card. If the correct algorithm is not detected 

1 0 the debit card is ignored. 

It will be understood by one skilled in the art that any or all of the 
embodiments can be combined to provide multiple protection against 
counterfeit debit cards and communication devices. Figure 9 illustrates the 
method of authorizing transmissions from the remote communicator 200 to a 

1 5 base unit using a combination of the preferred and second alternate 

embodiments. As illustrated, after the remote communicator generates and 
outputs a random code word, the debit card returns a decoded random word. 
If the decoded word is a correct match the remote communicator reads a 
protection word stored on the debit card. The remote communicator generates 

20 a key word based on the protection word and outputs the key word to the 
debit card. If the remote communicator outputs the correct key word, the 
communicator can read and update the content of the authorization value. 
The debit card will shut down if the incorrect key word is output four times. 
After the debit card has recognized the correct key word from the remote 

25 communicator, the user of the remote communicator can provide the debit 
card with an optional updated custom protection word and a corresponding 
key word for continued use by that customer's particular remote 
communicator. 

In the event that a counterfeit remote communicator is developed 
30 where the counterfeit unit contains changes to the original software burnt in 
the micro processor, protection similar to that used by cellular telephone 
services can be used. 
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Although specific embodiments have been illustrated and described 
herein, it will be appreciated by those of ordinary skill in the art that any 
arrangement which is calculated to achieve the same purpose may be 
5 substituted for the specific embodiment shown. This application is intended 
to cover any adaptations or variations of the present invention. 



BNSDOCID: <WO 962491 3A2J_> 



WO 96/24913 PCT/GB96/00269 



24 



CLAIMS 

1. A method of authorizing transmissions from a plurality of remote 
communicators to a base station, the method comprising the steps of: 

5 reading a coded protection word stored on a storage medium of 

a debit card with one of the plurality of remote communicators; 

decoding the coded protection word with one of the plurality of 
remote communicators and generating a key word based on the 
decoded protection word; 

10 communicating the key word to the debit card; and 

evaluating the key word with the debit card and authorizing the 
one of the plurality of remote communicators to transmit to the base 
station based on the key word and an authorization value stored on the 
storage medium. 

15 

2. The method of claim 1 further includes the step of providing the debit 
card with a custom protection word and a custom key word for use by one of 
the plurality of remote communicators. 

20 3. The method of claim I wherein the authorization value is a pre- 
determined time value debited accordingly as the one of the plurality of 
remote communicators transmits to the base station. 

4. * The method of claim 1 wherein the storage medium is a 
25 microprocessor. 

5. A method of authorizing transmissions from a plurality of remote 
communicators to a base station, the method comprising the steps of; 

reading a coded protection word stored on a storage medium of 
30 a debit card with one of the plurality of remote communicators; 

transmitting the coded protection word to the base station using 
the one of the plurality of remote communicators; 
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comparing the received coded protection word with a master 
list of valid coded protection words stored at the base station; 

transmitting a validation signal to the one of the plurality of 
remote communicators indicating if the coded protection word is valid; 
5 and 

authorizing the one of the plurality of remote communicators to 
transmit to the base station based on the validation signal and an 
authorization value stored on the storage medium of the debit card. 



10 6. The method of claim 5 further includes the step of storing a new 
protection word on the debit card. 

7. The method of claim 5 wherein the authorization value is a pre- 
determined time value debited accordingly as the one of the plurality of 
1 5 remote communicators transmits to the base station. 



8. The method of claim 5 wherein the storage medium is a magnetic 
strip. 

20 9. A method of authorizing transmissions from a plurality of remote 
communicators to a base station, the method comprising the steps of; 

generating a pseudo random code word using one of the 
plurality of remote communicators; 

communicating the pseudo random code word to a debit card 
25 comprising a storage medium containing an authorization value and a 

decoding algorithm; 

decoding the pseudo random code word using the decoding 
algorithm and communicating the decoded pseudo random code word 
to the one of the plurality of remote communicator; and 
30 reading the authorization value from the storage medium if the 

decoded pseudo random code word is correct. 
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10. The method of claim 9 wherein the storage medium is a 
microprocessor. 

11. A remote communication system for two-way messaging with a base 
5 station, the remote communication system comprising: 

a debit card having a storage medium for storing a coded 
protection word and an authorization value; 

a remote communicator for reading from the storage medium 
and writing to the storage medium; 
] o a decoder located at the remote communicator for decoding the 

protection code word read from the storage medium and generating a 
key word communicated to the debit card; and 

an evaluator located at the debit card for evaluating the key 
word and authorizing the remote communicator to communicate with 
15 the base station. 

12. The system of claim 1 1 wherein the storage medium is a 
microprocessor. 

20 13. A remote communication system for two-way messaging with a base 
station, the remote communication system comprising: 

a debit card having a storage medium for storing a coded 
protection word and an authorization value; 

a remote communicator for reading from the storage medium 
25 and writing to the storage medium; 

a transmitter located at the remote communicator for 
transmitting to the base station the coded protection word read from 
the storage medium; and 

a receiver located at the remote communicator for receiving a 
30 validation signal indicating the validity of the coded protection word 

from the base station. 
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15. A remote communication apparatus for two-way messaging with a base 
station for use with a debit card having a storage medium for storing a coded 
protection word and an authorization value, the remote communication system 
comprising: 

a remote communicator for reading from the storage medium 
and writing to the storage medium; 

a code generator located at the remote communicator for 
generating a pseudo random code word and communicating the pseudo 
random code word to the debit card; and 

a decoder located at the debit card for decoding the pseudo 
random code word and communicating the decoded pseudo random 
code word to the remote communicator, such that the debit card reads 
the authorization value from the storage medium based on the decoded 
pseudo random code word. 

16. The apparatus of claim 15 wherein the storage medium is a 
microprocessor. 
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